Last updated: October 2026. This policy covers the data we process through this website (forms, newsletter, visit statistics and the Espacios catalogue) and through our communications with you.
1. Data controller
TERCOCER S.A., tax ID (CIF) A60106093, registered office at Avda. Barcelona 223, 08750 Molins de Rei (Barcelona, Spain), registered in the Barcelona Commercial Register, volume 25835, folio 168, sheet 94357. Email: info@tercocer.com. Telephone: +34 936 802 884.
2. What data we process and why
We only process the data needed for each of these purposes:
- Enquiries, quotes, samples and professional access. Your name, your email address and, if you provide them, telephone number, company, profession, postcode, town, the products you are interested in and your message, in order to reply to you, prepare quotes, send you samples and manage our business relationship.
- Newsletter. Your email address and language, only if you subscribe, to send you news and collections. Our mailing provider tells us about the delivery, opens and clicks of each newsletter, and about unsubscriptions.
- Visit statistics. The page viewed, the referring site (only its main address, not the exact page), the language, the type of device (computer, tablet or mobile), the approximate country, region and city, the date and time, and a visitor code that changes every day. That code is calculated from your IP address and your browser; neither the IP address nor the full browser identifier (user agent) is stored. Location is derived from the IP address at the time of the visit; no coordinates, postcode or address are stored.
- Espacios catalogue measurement. Loaded photos that are actually visible, their size and position, product pages opened from the catalogue and their visible time (up to 60 seconds), with device type, approximate country, region and city and a visitor code calculated using a daily random key that is not retained. For the heatmap, on computers only and, where applicable, for a proportion of visits, pointer-hover times over the photo are added up in 8×8 zones and stored in aggregate by photo and day, without a visitor code, paths, menus, fields, identification of people or gaze tracking. This data helps arrange the catalogue and select images, not assess people. Signed-in staff and known bots are excluded.
- Website security. Your IP address is used in the server's memory to limit the number of requests and prevent abuse. So that this limit continues to work if the server restarts, for no more than 48 hours we store a fingerprint of the address calculated with a secret key, which cannot be used to recover it, together with a request counter. The IP address itself is not stored.
- Project photographs. If you appear in a project photograph published in the Espacios catalogue, we process your image on the basis of the authorisation obtained by the person who took it. If you are a Tercocer sales representative and send photographs, we process your account data, your submissions and your declarations under the submission terms you accept.
We do not process special categories of data or data of minors, and we do not create profiles or make automated decisions about you.
3. Legal basis
Each processing operation is based on:
- Taking steps at your request before entering into a contract, or performing a contract (Article 6(1)(b) GDPR): quotes, samples and the business relationship.
- Your consent (Article 6(1)(a)): the newsletter. You can withdraw it at any time using the unsubscribe link included in each mailing.
- Our legitimate interest (Article 6(1)(f)): replying to general enquiries and protecting the website against abuse, subject to balancing your rights and your right to object. Audience measurement requires the specific assessment described below.
- The absence of cookies or the first-party nature of a tool does not guarantee a consent exemption. Activating measurement depends on a documented assessment of its purpose, configuration, legal basis and applicable rules, including AEPD criteria; prior consent is required where applicable. The heatmap is part of this measurement.
- Project photographs: the owners' authorisations and, where applicable, the express consent of identifiable people (Spanish Organic Law 1/1982), together with Tercocer's legitimate interest in being able to prove them.
4. How long we keep data
We keep data only for as long as necessary:
- Enquiries and business relationship: while we handle your request or the relationship lasts and, afterwards, for the limitation periods of any applicable legal claims.
- Newsletter: until you unsubscribe. After that we keep only your email address on a suppression list so that we do not write to you again.
- Espacios catalogue measurement: the heatmap, stored in aggregate by photo and day, is deleted automatically after 90 days; other measurement data after 25 months.
- General visit statistics, including the approximate country, region and city: deleted automatically after 25 months. Abuse-control fingerprints and counters: no more than 48 hours.
- Project photographs and their authorisations: while the photograph is published and for five years after it is removed, so that the rights can be proven in the event of a claim. Submitted photographs that are not published (rejected) are deleted automatically after 30 days.
5. Recipients
We do not share your data with third parties unless required by law. Only our server hosting provider and our email provider have access to it, solely to provide their services to us and under a data processing agreement. Visit measurement does not use any external provider.
6. International transfers
If a provider processes data outside the European Economic Area, it does so with the safeguards required by the GDPR, such as a European Commission adequacy decision (for example, the EU-US Data Privacy Framework) or standard contractual clauses.
7. Your rights
You can exercise the following rights at any time:
- Access: find out what data about you we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data.
- Objection: object to processing based on our legitimate interest, including visit measurement.
- Restriction: ask us to stop using your data while a claim is being resolved.
- Portability: receive the data you gave us in a commonly used format.
- Withdrawal of consent: at any time, without affecting processing carried out before.
Write to info@tercocer.com stating which right you wish to exercise. We will only ask for additional information to verify your identity if we have reasonable doubts about it. If you disagree with our reply, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.
To stop us measuring your visit to the Espacios catalogue and to product pages, you do not need to write to us: the Global Privacy Control signal in your browser or the “Don't measure my visit” button in the cookie policy is enough. As we do not store your IP address or any stable identifier, we will usually be unable to find the data of a specific visit in our statistics (Article 11 GDPR).
See the cookie policy
8. Data security
Tercocer applies appropriate technical and organisational measures to ensure a level of security suited to the risk, protecting your data against unauthorised access, loss or alteration. We periodically review these measures to maintain their effectiveness.
9. Changes to this policy
We may update this policy to reflect changes in the law or in our business. The date of the last update is shown at the beginning. We recommend that you review it from time to time.
10. Contact
If you have any questions about this policy or your data, write to info@tercocer.com, call +34 936 802 884 or write to Avda. Barcelona 223, 08750 Molins de Rei (Barcelona, Spain).
Go to the contact page
